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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )S Responsive to communication(s) filed on 26 February 2007 . 
2a)Q This action is FINAL. 2b)^ This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
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DETAILED ACTION 

1 . This is in response to the arguments filed on 02/26/2007. 

2. Claims 1-32, and 49-62 are pending in the application. 

3. Claims 1-32, and 49-62 have been rejected. 



Response to Amendment 

4. The examiner approves the amendments made to claim 17, and 49-62. 

5. The examiner approves cancellation of claims 33-48. 

6. The examiner withdraws the 101 rejection as satisfactory amendment made to 
the claims. 

Response to Arguments 

7. Applicants arguments with respect to claims 1 -32, and 49-62 have been considered but 
are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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8. Claims 1-32, and 49-62 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Bathrick et al hereafter Bathrick (US patent 5010572) in view of 
Marino, Jr. et al hereafter Marino (US Patent 5530758). 

9. As per claim 1 , Bathrick discloses a method for automatically negotiating a 
security protocol, comprising: comparing a first protocol set associated with the internal 
node to a second protocol set associated with the external node; and establishing a 
secure connection between the external node and the internal node when a matching 
protocol between the first protocol set and the second protocol set is found (abstract, 
col. 1, lines 53-67, col. 2, lines 1-32). Although, Bathrick discloses establishing a secure 
connection between two nodes based on protocol (abstract, col. 1, lines 53-67, col. 2, 
lines 1-32), he does not explicitly disclose receiving a security authorization request to 
establish a secure connection between an internal node, the internal node being internal 
to a security-enabled domain, and an external node, the external node being external to 
the security-enabled domain. Nevertheless, it is well known in the network security art at 
the time of invention that a security domain will authorize to establish a connection with 
other nodes outside of that domain. Exemplary of this is Marino who discloses 
receiving a security authorization request to establish a secure connection between an 
internal node, the internal node being internal to a security-enabled domain, and an 
external node, the external node being external to the security-enabled domain (col. 3, 
lines 1-67, abstract). 

Accordingly, it would been obvious to one of ordinary skill in the network security art at 
the time of invention was made to have incorporated Marino's teachings of operational 
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methods for a secure node in a computer network with the teachings of Bathrick, for the 
purpose of suitably establishing the connection between two nodes in accordance with 
their protocol matching (col. 3-4). 

10. As per claim 2-5, Bathrick does not disclose a method wherein the external node 
comprises at least one of a computer and a network-enabled wireless device, wherein 
the internal node comprises at least one of a client computer and a server, wherein the 
security-enabled domain comprises a distributed directory domain, wherein the security- 
enabled domain comprises a certificate-based domain. However, Marino discloses 
wherein the external node comprises at least one of a computer and a network-enabled 
wireless device (col. 4, lines 26-67), wherein the internal node comprises at least one of 
a client computer and a server, wherein the security-enabled domain comprises a 
distributed directory domain (col. 3, lines 1-67, abstract), wherein the security-enabled 
domain comprises a certificate-based domain (col. 3, lines 36-67). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 2-5. 

11. As per claim 6-9, Bathrick does not disclose a method, wherein the certificate- 
based domain comprises a Kerberos-enabled domain, wherein the matching protocol 
comprises an X.509 certificate, wherein the security authorization request is generated 
by the external node, and wherein the step of receiving the security authorization 
request is executed by the internal node. However, Marino discloses wherein the 
certificate-based domain comprises a Kerberos-enabled domain, wherein the matching 
protocol comprises an X.509 certificate (col. 3, lines 36-67), wherein the security 
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authorization request is generated by the external node, and wherein the step of 
receiving the security authorization request is executed by the internal node (col. 3, 
lines 1-67, abstract). 

the same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 6-9. 

12. As per claim 10-12, Bathrick does not disclose a method wherein the security 
authorization request is generated by the internal node, wherein the step of receiving 
the security authorization request is executed by the external node, a step of 
terminating the secure connection when a session between the external node and the 
internal node is complete. However, Marino discloses wherein the security authorization 
request is generated by the internal node, wherein the step of receiving the security 
authorization request is executed by the external node (col. 3, lines 1-67, abstract), a 
step of terminating the secure connection when a session between the external node 
and the internal node is complete (col. 4, lines 26-67) 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 10-12. 

1 3. As per claim 1 3-1 4, Bathrick disclose a method comprising a step of terminating 
connection processing when no match between the first protocol set and the second 
protocol set is found, a step of selecting a protocol to use in establishing the secure 
connection when a plurality of matching protocols are found (abstract, col. 1 , lines 53- 
67, col. 2, lines 1-32). 
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1 4. As per claim 1 5-1 6, Bathrick does not disclose a method comprising a step of 
authenticating at least one of the internal node and the external node, wherein the step 
of authenticating comprises communicating a certificate to a certificate authority. 
However, Marino discloses comprising a step of authenticating at least one of the 
internal node and the external node (col. 3, -lines 1-67, abstract), wherein the step of 
authenticating comprises communicating a certificate to a certificate authority (col. 3, 
lines 36-67). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 15-16. 

1 5. As per claim 1 7, Bathrick disclose a system for automatically negotiating a 
security protocol, a node with an associated first protocol set and a second node having 
an associated second protocol set, comparing the first protocol set associated with the 
internal node to the second protocol set associated with the external node, and 
establishing a secure connection between the external node and the internal node when 
a matching protocol between the first protocol set and the second protocol set is found 
(abstract, col. 1, lines 53-67, col. 2, lines 1-32). He does not expressly disclose an 
internal node, the internal node being internal to a security-enabled domain and a 
negotiation engine, the negotiation engine receiving a security authorization request to 
establish a secure connection between the internal node and [[the]] an external node 
being external to the security-enabled domain. However, Marino discloses an internal 
node, the internal node being internal to a security-enabled domain and a negotiation 
engine, the negotiation engine receiving a security authorization request to establish a 
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secure connection between the internal node and [[the]] an external node being external 
to the security-enabled domain (col. 3, lines 1-67, abstract). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 17. 

1 6. Claims 1 8-32 are listed all the same elements of claim 2-1 6 but in a system form 
rather than a method form. Therefore, the supporting rationales of the rejection to claim 
2-16 apply equally as well to claim 18-32. 

1 7. As per claim 49, Bathrick disclose one or more tangible computer-readable 
media having computer-executable instructions embodied thereon comprising: 
comparing a first protocol set associated with the internal node to a second protocol set 
associated with the external node; and establishing a secure connection between the 
external node and the internal node when a matching protocol between the first protocol 
set and the second protocol set is found (abstract, col. 1, lines 53-67, col. 2, lines 1-32). 
He does not expressly disclose receiving a security authorization request to establish a 
secure connection between an internal node, the internal node being internal to a 
security-enabled domain, and an external node, the external node being external to the 
security-enabled domain. However, Marino discloses disclose receiving a security 
authorization request to establish a secure connection between an internal node, the 
internal node being internal to a security-enabled domain, and an external node, the 
external node being external to the security-enabled domain (col. 3, lines 1-67, 
abstract). 
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The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 49. 

18. Claims 50-62 are listed all the same elements of claim 2-16 but in a computer 
readable medium form rather than a method form. Therefore, the supporting rationales 
of the rejection to claim 2-16 apply equally as well to claim 50-62. 

Conclusion 

19. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). A shortened statutory period for reply to this final 
action is set to expire THREE MONTHS from the mailing date of this action. In the 
event a first reply is filed within TWO MONTHS of the mailing date of this final action 
and the advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on the date 
the advisory action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will the 
statutory period for reply expire later than SIX MONTHS from the mailing date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Mohammad w. Reza whose telephone number is 571- 
272-6590. The examiner can normally be reached on M-F (9:00-5:00). 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, MOAZZAMI NASSER G can be reached on (571)272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 

Mohammad Wasim Reza 
AU2136 
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